diff --git a/_service b/_service
index 9ac6407..a535be5 100644
--- a/_service
+++ b/_service
@@ -2,7 +2,7 @@
   <service name="tar_scm" mode="disabled">
     <param name="url">https://github.com/aquasecurity/trivy</param>
     <param name="scm">git</param>
-    <param name="revision">v0.24.4</param>
+    <param name="revision">v0.25.0</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="versionrewrite-pattern">v(.*)</param>
     <param name="changesgenerate">enable</param>
diff --git a/_servicedata b/_servicedata
index 68a1bcb..00d59fe 100644
--- a/_servicedata
+++ b/_servicedata
@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/aquasecurity/trivy</param>
-              <param name="changesrevision">06659f1509a19f601d7f7ff0cfe221f87c466566</param></service></servicedata>
\ No newline at end of file
+              <param name="changesrevision">4470a181e2daf993d2e0402d8f29f6c0a6c5c2e9</param></service></servicedata>
\ No newline at end of file
diff --git a/trivy-0.24.4.tar.gz b/trivy-0.24.4.tar.gz
deleted file mode 100644
index a384835..0000000
--- a/trivy-0.24.4.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:2bc03b4d45628dba3fe079e27ad859ab7718e6d52ffa1121f2de0b233a282aa7
-size 6526717
diff --git a/trivy-0.25.0.tar.gz b/trivy-0.25.0.tar.gz
new file mode 100644
index 0000000..e027c16
--- /dev/null
+++ b/trivy-0.25.0.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:bb744042d0284264ef63c8c8584895c3de817cff6b9cf55eb0bf62794f8462cb
+size 6616746
diff --git a/trivy.changes b/trivy.changes
index 6441d18..5e07ded 100644
--- a/trivy.changes
+++ b/trivy.changes
@@ -1,3 +1,26 @@
+-------------------------------------------------------------------
+Fri Apr  1 07:30:58 UTC 2022 - Johannes Kastl <kastl@b1-systems.de>
+
+- Buildrequire go1.18 as upstream says in go.mod
+
+-------------------------------------------------------------------
+Fri Apr 01 07:03:41 UTC 2022 - kastl@b1-systems.de
+
+- Update to version 0.25.0:
+  * docs(filter vulnerabilities): fix link (#1880)
+  * feat(template) Add misconfigurations to gitlab codequality report (#1756)
+  * fix(rpc): add PkgPath field to client / server mode (#1643)
+  * fix(vulnerabilities): fixed trivy-db vulns (#1883)
+  * feat(cache): remove temporary cache after filesystem scanning (#1868)
+  * feat(sbom): add a dedicated sbom command (#1799)
+  * feat(cyclonedx): add vulnerabilities (#1832)
+  * fix(option): hide false warning about remote options (#1865)
+  * chore: bump up Go to 1.18 (#1862)
+  * feat(filesystem): scan in client/server mode (#1829)
+  * refactor(template): remove unused test (#1861)
+  * fix(cli): json format for trivy version (#1854)
+  * docs: change URL for tfsec-checks (#1857)
+
 -------------------------------------------------------------------
 Tue Mar 22 10:46:08 UTC 2022 - Dirk Müller <dmueller@suse.com>
 
diff --git a/trivy.spec b/trivy.spec
index 2847aeb..47be18b 100644
--- a/trivy.spec
+++ b/trivy.spec
@@ -19,7 +19,7 @@
 
 %global goipath github.com/aquasecurity/trivy
 Name:           trivy
-Version:        0.24.4
+Version:        0.25.0
 Release:        0
 Summary:        A Simple and Comprehensive Vulnerability Scanner for Containers
 License:        Apache-2.0
@@ -28,7 +28,7 @@ URL:            https://github.com/aquasecurity/trivy
 Source:         %{name}-%{version}.tar.gz
 Source1:        vendor.tar.gz
 BuildRequires:  golang-packaging
-BuildRequires:  golang(API) = 1.17
+BuildRequires:  golang(API) = 1.18
 Requires:       ca-certificates
 Requires:       git-core
 Requires:       rpm
diff --git a/vendor.tar.gz b/vendor.tar.gz
index c800a91..f49815a 100644
--- a/vendor.tar.gz
+++ b/vendor.tar.gz
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:7d718298deb567a1c757b542df6d3488b6657f72959f7c4b416bc337503925c4
-size 34346763
+oid sha256:10aa3d5207de9a405b95340a4d41cc9cf1a9cc34539a3364fc220d505cbdf094
+size 34320239